Skip to main content
fgilloteau_FTNT
Staff
Staff
September 29, 2015

Technical Note: EDNS support

  • September 29, 2015
  • 0 replies
  • 9136 views
Description
Extension mechanisms for DNS (EDNS) is a specification for expanding the size of several parameters of the Domain Name System (DNS) protocol which had size restrictions that the Internet engineering community deemed too limited for increasing functionality of the protocol. The first set of extensions was published in 1999 by the Internet Engineering Task Force as RFC 2671, also known as EDNS0.

More information is available here: https://en.wikipedia.org/wiki/Extension_mechanisms_for_DNS

EDNS0 implies UDP DNS message length larger than 512 bytes. Some firewalls can block this kind of messages assuming the maximum size of a DNS message length is 512 bytes.

FortiGate supports EDSN0, and thus DNS messages with length larger than 512 bytes.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!